HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)PIILowContained

American Trust Company

bd_dbf1280fe84a4fa0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 13, 2024

Filed

Jan 2, 2025

To disclose

20 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for American Trust Company →2 incidents on file

American Trust Company notified the California Attorney General of unauthorized access to its email environment. Suspicious activity was detected on August 13, 2024, with unauthorized copying of emails occurring between August 8 and August 13, 2024. The incident involved names and other data elements. The company secured the email tenant, investigated the scope, and is offering credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d20 weeks discovery → filing

Incident timeline

undetected · 5 days

discovery → filing · 20 weeks / 142 days

Aug 8, 2024

Begins

Aug 13, 2024

Discovered

Jan 2, 2025

Filed

vs. sector median

+11 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_287d49af40112a722025-01-02Candidate
Nebraska State AGbd_38d2f65d098bb14c2025-01-02Verified
Massachusetts State AGbd_86cf6657edd266fe2025-01-02Verified
Vermont State AGbd_ca6b8a9f4340b8b32025-01-02Verified

Show 2 more filings ↓

Washington State AGbd_d444b726115399bc2025-01-02Verified
Indiana State AGbd_e428feb5486279e12025-01-02Verified

Name: American Trust Company
norm: american trust

Name: American Trust Company
norm: american trust
Industry: Financial Servicesllm

Discovered: Aug 13, 2024
Breach occurred: Aug 8, 2024 – Aug 13, 2024
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1114 Email Collection
Threat actor: External

During the incident: Took steps to secure the email tenant
Assessed the security of the email environment
Investigated the activity
Notifying potentially impacted parties
Providing resources that they may consider
Reviewing and enhancing our existing policies and procedures
Changes made: Reviewing and enhancing our existing policies and procedures
Providing access to complimentary credit monitoring through Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(142 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Maine State AGJan 2 · first

Nebraska State AGJan 2 · first

Massachusetts State AGJan 2 · first

Vermont State AGJan 2 · first

Washington State AGJan 2 · first

Indiana State AGJan 2 · first

California State AGJan 2 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-596909
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 2, 2025
Raw hash: 9be6162c9718397444f3acff1f6163cbc2ae016463973ddf63d2036185689091

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityAmerican Trust Company

Victim entityAmerican Trust Company

Incidentdiscovered Aug 13, 2024

Stated responseTook steps to secure the email tenant

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov